Deploy Umbrella Virtual Appliances in GCP with Terraform

Introduction

This document describes how to deploy the Cisco Umbrella Virtual Appliances in GCP with Terraform.

Prerequisites

Requirements

Cisco recommends that you have knowledge of these topics: 

• Cisco Umbrella Virtual Appliance
• Google Cloud Platform (GCP)
• Terraform

Components Used

This document is not restricted to specific software and hardware versions. 

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.

Configure

Here are the steps to deploy Cisco Umbrella Virtual Appliance (VA) in GCP with the use of Terraform:

Step 1: Create the Cisco Umbrella Virtual Appliance Template in GCP

Before the resources are applied, you need to create the Umbrella Virtual Appliance Template in GCP. To create the Umbrella Virtual Appliance Template, see Deploy VAs in Google Cloud Platform.

Then ensure that the environment variables are defined in the variables.tf file.

Step 2: Update the variables in variables.tf file

Update the variables in variable.tf file:

variable "gcp-project-name" {
  description = "Name of the GCP Project"
  default = "my-project"
}
variable "gcp-region" {
  description = "GCP Region"
  default = "us-east4"
}
variable "gcp-zone" {
  description = "GCP Zone"
  default = "us-east4-a"
}

Step 3: Define a GCP network

Define a GCP network to attach the Umbrella VA instances:

# Create Network
resource "google_compute_network" "vpc_network" {
  name                    = "gcp-network"
  auto_create_subnetworks = "true"
}

Step 4: Fetch the Umbrella VA Template

Fetch the Umbrella VA Template that was created in Step 1:

data "google_compute_instance_template" "umb_va_temp" {
  project = var.gcp-project-name
  name    = "umbrella-va-instance-template"
}

resource "google_compute_instance_from_template" "umb_va_a" {
  name = "umb-va-a"
  zone = var.gcp-zone

  source_instance_template = data.google_compute_instance_template.umb_va_temp.id

  network_interface {
    # A default network is created for all GCP projects
    network = google_compute_network.vpc_network.self_link
    access_config {
    }
  }
}

resource "google_compute_instance_from_template" "umb_va_b" {
  name = "umb-va-b"
  zone = var.gcp-zone

  source_instance_template = data.google_compute_instance_template.umb_va_temp.id

  network_interface {
    # A default network is created for all GCP projects
    network = google_compute_network.vpc_network.self_link
    access_config {
    }
  }
}